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Sent: 24 February 2020 12:43 
To: SARguidance 

Subject: Draft SAR Guidance 
Sensitivity: Confidential 


External: This email originated outside the ICO. 
Good afternoon, 


| am aware that your official deadline has closed, but a particular query seems to regularly raise 
its head within my region and | thought it might be a good idea to flag it; although I’m sure it may 
well have been raised by other organisations. 


It would be really helpful for organisations to understand what the ICO means by "reasonable" in 
the context of undertaking “reasonable searches’ to identify and locate personal data; when a 
requestor has refused to provide further details. For example, as part of their SAR, a recent 
requestor asked for “all emails held by the organisation which mention my name or my initials." 


It is appreciated that SARs by their nature are individual, but a steer from the ICO as to what 
lengths an organisation is expected to go in such a situation would be invaluable. 


Regards, 


Corporate Information Governance Team 
Solihull Council 


Te MEN 


For more information about the Council (including Corporate Structure, Spending and Contracts): 


http://www.solihull.gov.uk/opendata 
For more information about the Council's Privacy Notice: https://www.solihull.gov.uk/About-the- 


Council/Data-protection-FOl/Solihull-Council-Statement 
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DISCLAIMER: 

‘This e-mail and files transmitted with it may contain information which is private and confidential and must be 
handled accordingly. If you are 

not the intended recipient, please notify the sender immediately and delete the message and any attachments. Any 
views or opinions presented 

are solely those of the author and do not necessarily represent those of Solihull Council unless explicitly stated 
otherwise. Solihull Council may 

monitor the contents of e-mail sent and received via its network, for the purposes of ensuring compliance with its 
policies, procedures and any 

legal obligations. Please note if we receive a request to access information e.g. under the Freedom of Information 
Act or data protection 

legislation, the contents of e-mails may have to be disclosed to third parties. If you would like to learn more about 


1 


how the council uses 
information please refer to the council’s website’ 


Email Security 
We use Transport Layer Security (TLS) to encrypt and protect email traffic. If your mail server does not support TLS, 


you should be aware that any emails you send to, or receive from us, may not be protected in transit. 
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